|
|||||||
|
|
|
 |
|
|
Strumenti |
22-11-2006, 23:51
|
#381 | |
|
Senior Member
Iscritto dal: Jul 2004
Città: Hardware Upgrade
Messaggi: 5212
|
Quote:
 Complimenti a eraser comunque 
|
|
|
|
|
26-11-2006, 11:29
|
#382 |
|
Senior Member
Iscritto dal: Oct 2006
Città: Treviso
Messaggi: 462
|
io invece avevo un problema... il processo service32.exe e un file iexplorre32.dll che avg mi segnava come virus
 ... non sono riuscito a rimuoverlo ne con gmer ( che non ha trovato nulla ) ne con spybot.... allora ho passato il pc con spyware terminator  e mi ha riconosciuto il processo service32.exe come sw sconosciuto... io avendo letto il forum ( anzi il MITICO forum  ) l'ho eliminato dalla apposita finestra del programma ( bottone rimuovi software ) e ... bingo!!!   pc ok con problemi di connessione e riconoscimento di virus risolti.... che dite.. poteva essere Gromozon??? ps: per sicurezza ho controllato facendio un og con hijiackthis ed è tutto ok...
__________________
" bevi buono, bevi sano, bevi solo Prosecco trevigiano.... "
|
|
|
|
|
28-11-2006, 20:13
|
#383 |
|
Bannato
Iscritto dal: Aug 2005
Città: Caserta
Messaggi: 11990
|
scusate non so una mazza ....ho letto nella prima pagina che si parla di rootkit di kaspersky ...allora che state facendo? state piallando kaspersky? quali sono gli effetti del kaspersky? e quali sono le versione affette da rootkit?
|
|
|
|
|
30-11-2006, 00:05
|
#384 |
|
Senior Member
Iscritto dal: May 2004
Messaggi: 1352
|
Mi becco Gromozon un giorno sì e l'altro pure!
Salve...ho da poco scoperto che l'errore del plugin flash con Firefox era dovuto a questo simpaticone
 Lo elimino ormai ogni giorno da 1 sett. con Prevx1 ed il tool Symnatec eppure continuo a riprenderlo navigando rigorosamente con Firefox 2.0 su siti che reputo attendibili  Fortunatamente (o sfortunatamente visto che non me ne ha fatto accorgere prima) sembra una variante soft nel senso che non mi ha mai impedito di visitare nessun sito nè di avviare i tool di rimozione....con una simpatica dll di nome stoqa.dll!!!  La questione è che sta lì e sembra non esserci verso di farlo sloggiare! Ora, posto che probabilmente formatterò perchè non mi fido più dei tool di rimozione (ad es mi si crea a prescindere un account in maniera sistematica, anche cancellandolo dall'altro sistema operativo, ogni volta che avvio il pc), cosa fare per non "impastare" anche il sistema operativo fresco di installazione? Da sottolineare che non amo gli antivirus e credevo di potermi fidare del firewall hardware del router... |
|
|
|
|
30-11-2006, 09:37
|
#385 | |
|
Senior Member
Iscritto dal: Jun 2003
Città: ..By The Sea..
Messaggi: 564
|
Quote:
Scaricare gmer (www.gmer.net) e fare due scansioni: rootkit e autostart, copiare i risultati (gmer ha direttamente il pulsante copy) e incollarli in un messaggio qua sul forum. Assicurarsi che in entrambe le scansioni NON sia selezionata l'opzione show all e lasciare tutte le altre opzioni così come sono. Infine, durante la scansione rootkit non utilizzare il pc e chiudere tutte le applicazioni aperte.
__________________
Without Contraries is no Progression... |
|
|
|
|
|
30-11-2006, 09:42
|
#386 | |
|
Senior Member
Iscritto dal: Jan 2002
Messaggi: 1961
|
Quote:
devi iniziare non dico ad amare ma ad accettare di avere un buon antivirus+antispyware ed il s.o. aggiornato x non avere troppi problemi. Il firewall hardware senz'altro aiuta, ma da solo non basta. ciao
__________________
Y4mon |
|
|
|
|
|
30-11-2006, 10:43
|
#387 | ||
|
Senior Member
Iscritto dal: May 2004
Messaggi: 1352
|
Quote:
Ho preferito aprire un nuovo thred vista la lunghezza dei log...se vuoi dare un occhio ti ringrazio: http://www.hwupgrade.it/forum/showth...0#post14908210 Quote:
Certo aggiornamenti, firewall prima software e poi hardware, antispyware ma un programmone come un antivirus in esec. automatica no! Vabbè già so...da domani virus a gogo!  
Ultima modifica di Methis : 30-11-2006 alle 10:46. |
||
|
|
|
|
03-12-2006, 02:16
|
#388 | |
|
Senior Member
Iscritto dal: Nov 2005
Messaggi: 893
|
Quote:
Il rootkit di kaspersky??? Ma che stai a dì? Senza offesa, ma come sei riuscito a capire sta cosa dalle prima pagina del topic? hai letto 4 parole sparse qua e là, hai visto un "kaspersky", un "rootkit" e hai fatto 2+2? boh... certo che se ognuno facesse così, addio efficienza del forum! sai quanti post stupidi come questo uscirebbero fuori! Nessuno nasce imparato, per carità, però prima di postare è bene far funzionare il cervello... Byez!
__________________
|
|
|
|
|
|
03-12-2006, 22:08
|
#389 |
|
Junior Member
Iscritto dal: Dec 2006
Messaggi: 1
|
il peggio
salve...sono nuovo e avrei bisogno di un pò di aiuto...e spero che qualcuno riesca veramente ad aiutarmi, ho il cpu praticamente bloccato, qualche strano virus mi ha disinstallato la scheda audio, le connessioni di rete LAN, nn moi funziona più la funzione copia e incolla, ho provato una serie di programmi antivirus, spywere ecc, qualcosa è venuto fuori ma nn basta! ma ancora i probòlemi ci sono, sapreste darmi qualche informazione su dove magari andare a cercare il virus?? ho qualche altro programma da usare...spero che qualcuno abbia una soluzione...senza dover formattare il cpu chiaramente!
grazie mille! |
|
|
|
|
03-12-2006, 22:14
|
#390 |
|
Senior Member
Iscritto dal: Oct 2004
Città: Milano
Messaggi: 2641
|
__________________
FOXYLADY è un MASCHIO!! Un amico è una persona che sa tutto di te e nonostante questo gli piaci |
|
|
|
|
05-12-2006, 10:53
|
#391 |
|
Member
Iscritto dal: Oct 2002
Città: Castelvetrano(TP)
Messaggi: 257
|
Ottimo lavoro.
Complimenti. |
|
|
|
|
11-12-2006, 11:38
|
#392 |
|
Senior Member
Iscritto dal: Mar 2004
Città: al nord
Messaggi: 3873
|
Ho bisogno di aiuto
Salve a tutti, ho un utente MOLTO sospetto di nome in una cartella nascosta:
tunMLUxFrpMTsSnE però il rootkit remover apposito della PrevX dice che non ho nessun rootkit. Allora faccio, come suggerito qualche post sopra, qualche scan con Gmer: Pagina Rootkit: Codice:
GMER 1.0.12.12011 - http://www.gmer.net
Rootkit scan 2006-12-11 11:38:17
Windows 5.1.2600 Service Pack 2
---- System - GMER 1.0.12 ----
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwClose
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateProcess
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateProcessEx
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateSection
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateSymbolicLinkObject
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateThread
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwDeleteKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwDeleteValueKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwDuplicateObject
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwEnumerateKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwEnumerateValueKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwFlushKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwInitializeRegistry
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwLoadKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwLoadKey2
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwNotifyChangeKey
SSDT kl1.sys ZwOpenFile
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwOpenKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwOpenProcess
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwOpenSection
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwQueryKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwQueryMultipleValueKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwQuerySystemInformation
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwQueryValueKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwReplaceKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwRestoreKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwResumeThread
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSaveKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetContextThread
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetInformationFile
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetInformationKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetInformationProcess
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetSecurityObject
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetValueKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSuspendThread
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwTerminateProcess
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwUnloadKey
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwWriteVirtualMemory
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[284]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[285]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[286]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[287]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[288]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[289]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[290]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[291]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[292]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[293]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[294]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[295]
SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[296]
Code \??\C:\WINDOWS\system32\drivers\klif.sys FsRtlCheckLockForReadAccess
Code \??\C:\WINDOWS\system32\drivers\klif.sys IoIsOperationSynchronous
---- Kernel code sections - GMER 1.0.12 ----
.text ntoskrnl.exe!KiDispatchInterrupt + BA 804DB92E 7 Bytes JMP F6665D70 \??\C:\WINDOWS\system32\drivers\klif.sys
.text ntoskrnl.exe!IoIsOperationSynchronous 804E8752 5 Bytes JMP F6663000 \??\C:\WINDOWS\system32\drivers\klif.sys
.text ntoskrnl.exe!FsRtlCheckLockForReadAccess 804FC0F1 5 Bytes JMP F6662B70 \??\C:\WINDOWS\system32\drivers\klif.sys
.text USBPORT.SYS!DllUnload F7CB97AE 5 Bytes JMP 81E30600
---- Devices - GMER 1.0.12 ----
Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_READ 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA 8236D1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_PNP 8236D1D8
Device \Driver\NetBT \Device\NetBT_Tcpip_{7857558E-057F-4EB2-B78B-89FB54214013} IRP_MJ_CREATE 81E7D990
Device \Driver\NetBT \Device\NetBT_Tcpip_{7857558E-057F-4EB2-B78B-89FB54214013} IRP_MJ_CLOSE 81E7D990
Device \Driver\NetBT \Device\NetBT_Tcpip_{7857558E-057F-4EB2-B78B-89FB54214013} IRP_MJ_DEVICE_CONTROL 81E7D990
Device \Driver\NetBT \Device\NetBT_Tcpip_{7857558E-057F-4EB2-B78B-89FB54214013} IRP_MJ_INTERNAL_DEVICE_CONTROL 81E7D990
Device \Driver\NetBT \Device\NetBT_Tcpip_{7857558E-057F-4EB2-B78B-89FB54214013} IRP_MJ_CLEANUP 81E7D990
Device \Driver\NetBT \Device\NetBT_Tcpip_{7857558E-057F-4EB2-B78B-89FB54214013} IRP_MJ_PNP 81E7D990
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CREATE 820208E0
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CLOSE 820208E0
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_DEVICE_CONTROL 820208E0
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 820208E0
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_POWER 820208E0
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_SYSTEM_CONTROL 820208E0
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_PNP 820208E0
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_CREATE 820208E0
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_CLOSE 820208E0
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_DEVICE_CONTROL 820208E0
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 820208E0
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_POWER 820208E0
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_SYSTEM_CONTROL 820208E0
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_PNP 820208E0
Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_CREATE 820208E0
Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_CLOSE 820208E0
Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_DEVICE_CONTROL 820208E0
Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_INTERNAL_DEVICE_CONTROL 820208E0
Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_POWER 820208E0
Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_SYSTEM_CONTROL 820208E0
Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_PNP 820208E0
Device \Driver\usbehci \Device\USBPDO-3 IRP_MJ_CREATE 821DE990
Device \Driver\usbehci \Device\USBPDO-3 IRP_MJ_CLOSE 821DE990
Device \Driver\usbehci \Device\USBPDO-3 IRP_MJ_DEVICE_CONTROL 821DE990
Device \Driver\usbehci \Device\USBPDO-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 821DE990
Device \Driver\usbehci \Device\USBPDO-3 IRP_MJ_POWER 821DE990
Device \Driver\usbehci \Device\USBPDO-3 IRP_MJ_SYSTEM_CONTROL 821DE990
Device \Driver\usbehci \Device\USBPDO-3 IRP_MJ_PNP 821DE990
Device \Driver\00000057 \Device\00000056 IRP_MJ_POWER [F845ADB6] sptd.sys
Device \Driver\00000057 \Device\00000056 IRP_MJ_SYSTEM_CONTROL [F847073C] sptd.sys
Device \Driver\00000057 \Device\00000056 IRP_MJ_PNP [F846977E] sptd.sys
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_READ 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_WRITE 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_FLUSH_BUFFERS 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DEVICE_CONTROL 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_INTERNAL_DEVICE_CONTROL 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SHUTDOWN 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CLEANUP 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_POWER 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SYSTEM_CONTROL 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_PNP 823D91D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 81E001D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSE 81E001D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_READ 81E001D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 81E001D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 81E001D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 81E001D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 81E001D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 81E001D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 81E001D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 81E001D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 81E001D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_READ 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_WRITE 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_FLUSH_BUFFERS 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_DEVICE_CONTROL 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_INTERNAL_DEVICE_CONTROL 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SHUTDOWN 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CLEANUP 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_POWER 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SYSTEM_CONTROL 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_PNP 823D91D8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE 81E001D8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSE 81E001D8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_READ 81E001D8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE 81E001D8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS 81E001D8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL 81E001D8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL 81E001D8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN 81E001D8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER 81E001D8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL 81E001D8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP 81E001D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE 8236E1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSE 8236E1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL 8236E1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL 8236E1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER 8236E1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL 8236E1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP 8236E1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CREATE 8236E1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CLOSE 8236E1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_DEVICE_CONTROL 8236E1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 8236E1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_POWER 8236E1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_SYSTEM_CONTROL 8236E1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_PNP 8236E1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE 8236E1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSE 8236E1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL 8236E1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL 8236E1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER 8236E1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL 8236E1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP 8236E1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_CREATE 8236E1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_CLOSE 8236E1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_DEVICE_CONTROL 8236E1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_INTERNAL_DEVICE_CONTROL 8236E1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_POWER 8236E1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_SYSTEM_CONTROL 8236E1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_PNP 8236E1D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_CREATE 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_READ 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_WRITE 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_FLUSH_BUFFERS 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_DEVICE_CONTROL 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_INTERNAL_DEVICE_CONTROL 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_SHUTDOWN 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_CLEANUP 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_POWER 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_SYSTEM_CONTROL 823D91D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_PNP 823D91D8
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE 81E7D990
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLOSE 81E7D990
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_DEVICE_CONTROL 81E7D990
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_INTERNAL_DEVICE_CONTROL 81E7D990
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLEANUP 81E7D990
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_PNP 81E7D990
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CREATE 81E7D990
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CLOSE 81E7D990
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_DEVICE_CONTROL 81E7D990
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_INTERNAL_DEVICE_CONTROL 81E7D990
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CLEANUP 81E7D990
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_PNP 81E7D990
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_CREATE 820208E0
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_CLOSE 820208E0
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_DEVICE_CONTROL 820208E0
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 820208E0
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_POWER 820208E0
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_SYSTEM_CONTROL 820208E0
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_PNP 820208E0
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_CREATE 820208E0
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_CLOSE 820208E0
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_DEVICE_CONTROL 820208E0
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 820208E0
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_POWER 820208E0
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_SYSTEM_CONTROL 820208E0
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_PNP 820208E0
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLOSE 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_READ 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_WRITE 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_INFORMATION 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_EA 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_EA 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SHUTDOWN 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_LOCK_CONTROL 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLEANUP 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_SECURITY 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_SECURITY 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_POWER 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_QUOTA 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_QUOTA 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP 81EFD700
Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_CREATE 820208E0
Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_CLOSE 820208E0
Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_DEVICE_CONTROL 820208E0
Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_INTERNAL_DEVICE_CONTROL 820208E0
Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_POWER 820208E0
Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_SYSTEM_CONTROL 820208E0
Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_PNP 820208E0
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSE 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_READ 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA 81EFD700
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP 81EFD700
Device \Driver\usbehci \Device\USBFDO-3 IRP_MJ_CREATE 821DE990
Device \Driver\usbehci \Device\USBFDO-3 IRP_MJ_CLOSE 821DE990
Device \Driver\usbehci \Device\USBFDO-3 IRP_MJ_DEVICE_CONTROL 821DE990
Device \Driver\usbehci \Device\USBFDO-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 821DE990
Device \Driver\usbehci \Device\USBFDO-3 IRP_MJ_POWER 821DE990
Device \Driver\usbehci \Device\USBFDO-3 IRP_MJ_SYSTEM_CONTROL 821DE990
Device \Driver\usbehci \Device\USBFDO-3 IRP_MJ_PNP 821DE990
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 823D91D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_READ 823D91D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_WRITE 823D91D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_FLUSH_BUFFERS 823D91D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_DEVICE_CONTROL 823D91D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_INTERNAL_DEVICE_CONTROL 823D91D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SHUTDOWN 823D91D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CLEANUP 823D91D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_POWER 823D91D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SYSTEM_CONTROL 823D91D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_PNP 823D91D8
Device \Driver\a0mbhxnu \Device\Scsi\a0mbhxnu1Port2Path0Target0Lun0 IRP_MJ_CREATE 81DD71D8
Device \Driver\a0mbhxnu \Device\Scsi\a0mbhxnu1Port2Path0Target0Lun0 IRP_MJ_CLOSE 81DD71D8
Device \Driver\a0mbhxnu \Device\Scsi\a0mbhxnu1Port2Path0Target0Lun0 IRP_MJ_DEVICE_CONTROL 81DD71D8
Device \Driver\a0mbhxnu \Device\Scsi\a0mbhxnu1Port2Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 81DD71D8
Device \Driver\a0mbhxnu \Device\Scsi\a0mbhxnu1Port2Path0Target0Lun0 IRP_MJ_POWER 81DD71D8
Device \Driver\a0mbhxnu \Device\Scsi\a0mbhxnu1Port2Path0Target0Lun0 IRP_MJ_SYSTEM_CONTROL 81DD71D8
Device \Driver\a0mbhxnu \Device\Scsi\a0mbhxnu1Port2Path0Target0Lun0 IRP_MJ_PNP 81DD71D8
Device \Driver\a0mbhxnu \Device\Scsi\a0mbhxnu1 IRP_MJ_CREATE 81DD71D8
Device \Driver\a0mbhxnu \Device\Scsi\a0mbhxnu1 IRP_MJ_CLOSE 81DD71D8
Device \Driver\a0mbhxnu \Device\Scsi\a0mbhxnu1 IRP_MJ_DEVICE_CONTROL 81DD71D8
Device \Driver\a0mbhxnu \Device\Scsi\a0mbhxnu1 IRP_MJ_INTERNAL_DEVICE_CONTROL 81DD71D8
Device \Driver\a0mbhxnu \Device\Scsi\a0mbhxnu1 IRP_MJ_POWER 81DD71D8
Device \Driver\a0mbhxnu \Device\Scsi\a0mbhxnu1 IRP_MJ_SYSTEM_CONTROL 81DD71D8
Device \Driver\a0mbhxnu \Device\Scsi\a0mbhxnu1 IRP_MJ_PNP 81DD71D8
Device \FileSystem\Cdfs \Cdfs IRP_MJ_CREATE 81FC4990
Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLOSE 81FC4990
Device \FileSystem\Cdfs \Cdfs IRP_MJ_READ 81FC4990
Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_INFORMATION 81FC4990
Device \FileSystem\Cdfs \Cdfs IRP_MJ_SET_INFORMATION 81FC4990
Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_VOLUME_INFORMATION 81FC4990
Device \FileSystem\Cdfs \Cdfs IRP_MJ_DIRECTORY_CONTROL 81FC4990
Device \FileSystem\Cdfs \Cdfs IRP_MJ_FILE_SYSTEM_CONTROL 81FC4990
Device \FileSystem\Cdfs \Cdfs IRP_MJ_DEVICE_CONTROL 81FC4990
Device \FileSystem\Cdfs \Cdfs IRP_MJ_SHUTDOWN 81FC4990
Device \FileSystem\Cdfs \Cdfs IRP_MJ_LOCK_CONTROL 81FC4990
Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLEANUP 81FC4990
Device \FileSystem\Cdfs \Cdfs IRP_MJ_PNP 81FC4990
---- Threads - GMER 1.0.12 ----
Thread 4:180 821C5A20
Thread 4:184 821A5C60
Thread 4:188 821A5C60
Thread 4:468 821C5A20
Thread 4:648 821C5A20
---- Registry - GMER 1.0.12 ----
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@ThreadingModel Apartment
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@cd042efbbd7f7af1647644e76e06692b 0xC8 0x28 0x51 0xAF ...
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@ThreadingModel Apartment
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@bca643cdc5c2726b20d2ecedcc62c59b 0x6A 0x9C 0xD6 0x61 ...
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@ThreadingModel Apartment
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@2c81e34222e8052573023a60d06dd016 0x7A 0x45 0x05 0xFD ...
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@ThreadingModel Apartment
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@2582ae41fb52324423be06337561aa48 0x3E 0x1E 0x9E 0xE0 ...
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@ThreadingModel Apartment
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@caaeda5fd7a9ed7697d9686d4b818472 0xCD 0x44 0xCD 0xB9 ...
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@ThreadingModel Apartment
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@a4a1bcf2cc2b8bc3716b74b2b4522f5d 0xDF 0x20 0x58 0x62 ...
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@ThreadingModel Apartment
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@4d370831d2c43cd13623e232fed27b7b 0x31 0x77 0xE1 0xBA ...
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@ThreadingModel Apartment
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@1d68fe701cdea33e477eb204b76f993d 0xAA 0x52 0xC6 0x00 ...
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@ThreadingModel Apartment
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@1fac81b91d8e3c5aa4b0a51804d844a3 0xF6 0x0F 0x4E 0x58 ...
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@ThreadingModel Apartment
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@f5f62a6129303efb32fbe080bb27835b 0xB1 0xCD 0x45 0x5A ...
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@ThreadingModel Apartment
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@fd4e2e1a3940b94dceb5a6a021f2e3c6 0x2A 0xB7 0xCC 0xB5 ...
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@ThreadingModel Apartment
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@ C:\WINDOWS\system32\OLE32.DLL
Reg \Registry\MACHINE\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@8a8aec57dd6508a385616fbc86791ec2 0x05 0x73 0x21 0xDD ...
---- Files - GMER 1.0.12 ----
ADS C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Windows NT\MSFax\Inbox\401c6ab403edaef.tif:Xj1phwzh5qcwungrN45kt3kiCe
ADS C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Windows NT\MSFax\Inbox\401c6ab403edaef.tif:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
ADS C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Windows NT\MSFax\Inbox\401c6ab41294a0a.tif:Xj1phwzh5qcwungrN45kt3kiCe
ADS C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Windows NT\MSFax\Inbox\401c6ab41294a0a.tif:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
ADS C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Windows NT\MSFax\Inbox\401c6e25503d005.tif:Xj1phwzh5qcwungrN45kt3kiCe
ADS C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Windows NT\MSFax\Inbox\401c6e25503d005.tif:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
ADS C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Windows NT\MSFax\SentItems\S-1-5-21-854245398-1563985344-839522115-1003$201c657c9b2bde4.tif:Xj1phwzh5qcwungrN45kt3kiCe
ADS C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Windows NT\MSFax\SentItems\S-1-5-21-854245398-1563985344-839522115-1003$201c657c9b2bde4.tif:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
ADS C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Windows NT\MSFax\SentItems\S-1-5-21-854245398-1563985344-839522115-1003$201c664aeef08db.tif:Xj1phwzh5qcwungrN45kt3kiCe
ADS C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Windows NT\MSFax\SentItems\S-1-5-21-854245398-1563985344-839522115-1003$201c664aeef08db.tif:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}
ADS C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Windows NT\MSFax\SentItems\S-1-5-21-854245398-1563985344-839522115-1003$201c69c7f007e13.tif:Xj1phwzh5qcwungrN45kt3kiCe
ADS ...
ADS C:\Documents and Settings\_\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\trap\SharingMetadata\eee\DFSR\Staging\CS{17BD7456-98B8-2877-752A-D1E3E10F8445}\01\11-{17BD7456-98B8-2877-752A-D1E3E10F8445}-v1-{3B40F146-BF5E-42D3-B89B-7E1D739AE5F7}-v11-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
---- EOF - GMER 1.0.12 ----
Codice:
GMER 1.0.12.12011 - http://www.gmer.net
Autostart scan 2006-12-11 11:38:42
Windows 5.1.2600 Service Pack 2
HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems@Windows = %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon@Userinit = C:\WINDOWS\system32\userinit.exe,
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ >>>
klogon@DLLName = C:\WINDOWS\system32\klogon.dll
Sebring@DLLName = C:\WINDOWS\system32\LgNotify.dll
HKLM\SYSTEM\CurrentControlSet\Services\ >>>
AVP /*Active Virus Shield*/@ = "C:\Programmi\AOL\Active Virus Shield\avp.exe" -r
ccadmin /*Client Connector Administrator*/@ = C:\Programmi\Dell\OpenManage\OMCC\iws\bin\win32\omaws32.exe "OMACS_KEY_OMA=SOFTWARE\Dell Computer Corporation\Dell OpenManage OMCC\Dell OMA"
Fax /*Fax*/@ = %systemroot%\system32\fxssvc.exe
NetBhb /*NetBhb*/@ = "C:\Programmi\File comuni\System\dOJ.exe" /*file not found*/
NICCONFIGSVC /*NICCONFIGSVC*/@ = C:\Programmi\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
NVSvc /*NVIDIA Display Driver Service*/@ = %SystemRoot%\system32\nvsvc32.exe
omccomsad /*OMCC OM Common Services*/@ = C:\Programmi\Dell\OpenManage\OMCC\oma\bin\omsad32.exe
RegSrvc /*RegSrvc*/@ = C:\WINDOWS\system32\RegSrvc.exe
S24EventMonitor /*Spectrum24 Event Monitor*/@ = C:\WINDOWS\system32\S24EvMon.exe
Spooler /*Spooler di stampa*/@ = %SystemRoot%\system32\spoolsv.exe
StarWindService /*StarWind iSCSI Service*/@ = C:\Programmi\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
UMWdf /*Windows User Mode Driver Framework*/@ = C:\WINDOWS\system32\wdfmgr.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Run >>>
@ShowLOMControl1 /*file not found*/ = 1 /*file not found*/
@aol"C:\Programmi\AOL\Active Virus Shield\avp.exe" = "C:\Programmi\AOL\Active Virus Shield\avp.exe"
@ /*file not found*/ = /*file not found*/
@NvCplDaemonRUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup = RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
@Dell QuickSetC:\Programmi\Dell\QuickSet\Quickset.exe = C:\Programmi\Dell\QuickSet\Quickset.exe
@nwiznwiz.exe /install = nwiz.exe /install
@DAEMON Tools"C:\Programmi\DAEMON Tools\daemon.exe" -lang 1033 = "C:\Programmi\DAEMON Tools\daemon.exe" -lang 1033
@SunJavaUpdateSched"C:\Programmi\Java\jre1.5.0_09\bin\jusched.exe" = "C:\Programmi\Java\jre1.5.0_09\bin\jusched.exe"
HKCU\Software\Microsoft\Windows\CurrentVersion\Run >>>
@PRONoMgr.exeC:\Programmi\Intel\NCS\PROSet\PRONoMgr.exe = C:\Programmi\Intel\NCS\PROSet\PRONoMgr.exe
@ZCfgSvc.exeC:\WINDOWS\system32\ZCfgSvc.exe = C:\WINDOWS\system32\ZCfgSvc.exe
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved >>>
@{42071714-76d4-11d1-8b24-00a0c9068ff3} /*Estensione panoramica video del Pannello di controllo*/deskpan.dll /*file not found*/ = deskpan.dll /*file not found*/
@{596AB062-B4D2-4215-9F74-E9109B0A8153} /*Pagina proprietà versioni precedenti*/%SystemRoot%\system32\twext.dll = %SystemRoot%\system32\twext.dll
@{9DB7A13C-F208-4981-8353-73CC61AE2783} /*Versioni precedenti*/%SystemRoot%\system32\twext.dll = %SystemRoot%\system32\twext.dll
@{00E7B358-F65B-4dcf-83DF-CD026B94BFD4} /*Autoplay for SlideShow*/(null) =
@{E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31} /*Cartella compressa*/(null) =
@{692F0339-CBAA-47e6-B5B5-3B84DB604E87} /*Extensions Manager Folder*/%SystemRoot%\system32\extmgr.dll = %SystemRoot%\system32\extmgr.dll
@{B41DB860-8EE4-11D2-9906-E49FADC173CA} /*WinRAR shell extension*/C:\Programmi\WinRAR\rarext.dll = C:\Programmi\WinRAR\rarext.dll
@{32020A01-506E-484D-A2A8-BE3CF17601C3} /*AlcoholShellEx*/C:\PROGRA~1\ALCOHO~1\ALCOHO~1\axshlex.dll = C:\PROGRA~1\ALCOHO~1\ALCOHO~1\axshlex.dll
@{e82a2d71-5b2f-43a0-97b8-81be15854de8} /*ShellLink for Application References*/C:\WINDOWS\system32\dfshim.dll = C:\WINDOWS\system32\dfshim.dll
@{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} /*Shell Icon Handler for Application References*/C:\WINDOWS\system32\dfshim.dll = C:\WINDOWS\system32\dfshim.dll
@{51EEE242-AD87-11d3-9C1E-0090278BBD99} /*Vim Shell Extension*/C:\Programmi\Vim\vim63\gvimext.dll = C:\Programmi\Vim\vim63\gvimext.dll
@(null) =
@{6af09ec9-b429-11d4-a1fb-0090960218cb} /*My Bluetooth Places*/C:\WINDOWS\system32\btneighborhood.dll = C:\WINDOWS\system32\btneighborhood.dll
@{FC9FB64A-1EB2-4CCF-AF5E-1A497A9B5C2D} /*Messenger Sharing Folders*/C:\Programmi\MSN Messenger\fsshext.8.0.0812.00.dll = C:\Programmi\MSN Messenger\fsshext.8.0.0812.00.dll
@{52B87208-9CCF-42C9-B88E-069281105805} /*Trojan Remover Shell Extension*/(null) =
@{A70C977A-BF00-412C-90B7-034C51DA2439} /*NvCpl DesktopContext Class*/C:\WINDOWS\system32\nvcpl.dll = C:\WINDOWS\system32\nvcpl.dll
@{FFB699E0-306A-11d3-8BD1-00104B6F7516} /*Play on my TV helper*/C:\WINDOWS\system32\nvcpl.dll = C:\WINDOWS\system32\nvcpl.dll
@{1CDB2949-8F65-4355-8456-263E7C208A5D} /*Desktop Explorer*/C:\WINDOWS\system32\nvshell.dll = C:\WINDOWS\system32\nvshell.dll
@{1E9B04FB-F9E5-4718-997B-B8DA88302A47} /*Desktop Explorer Menu*/C:\WINDOWS\system32\nvshell.dll = C:\WINDOWS\system32\nvshell.dll
@{1E9B04FB-F9E5-4718-997B-B8DA88302A48} /*nView Desktop Context Menu*/C:\WINDOWS\system32\nvshell.dll = C:\WINDOWS\system32\nvshell.dll
@{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} /*OpenOffice.org Column Handler*/"C:\Programmi\OpenOffice.org 2.1\program\shlxthdl.dll" = "C:\Programmi\OpenOffice.org 2.1\program\shlxthdl.dll"
@{087B3AE3-E237-4467-B8DB-5A38AB959AC9} /*OpenOffice.org Infotip Handler*/"C:\Programmi\OpenOffice.org 2.1\program\shlxthdl.dll" = "C:\Programmi\OpenOffice.org 2.1\program\shlxthdl.dll"
@{63542C48-9552-494A-84F7-73AA6A7C99C1} /*OpenOffice.org Property Sheet Handler*/"C:\Programmi\OpenOffice.org 2.1\program\shlxthdl.dll" = "C:\Programmi\OpenOffice.org 2.1\program\shlxthdl.dll"
@{3B092F0C-7696-40E3-A80F-68D74DA84210} /*OpenOffice.org Thumbnail Viewer*/"C:\Programmi\OpenOffice.org 2.1\program\shlxthdl.dll" = "C:\Programmi\OpenOffice.org 2.1\program\shlxthdl.dll"
HKLM\Software\Classes\*\shellex\ContextMenuHandlers\ >>>
gvim@{51EEE242-AD87-11d3-9C1E-0090278BBD99} = C:\Programmi\Vim\vim63\gvimext.dll
Kaspersky Anti-Virus@{dd230880-495a-11d1-b064-008048ec2fc5} = C:\Programmi\AOL\Active Virus Shield\shellex.dll
WinRAR@{B41DB860-8EE4-11D2-9906-E49FADC173CA} = C:\Programmi\WinRAR\rarext.dll
HKLM\Software\Classes\Directory\shellex\ContextMenuHandlers\WinRAR@{B41DB860-8EE4-11D2-9906-E49FADC173CA} = C:\Programmi\WinRAR\rarext.dll
HKLM\Software\Classes\Folder\shellex\ContextMenuHandlers\ >>>
Kaspersky Anti-Virus@{dd230880-495a-11d1-b064-008048ec2fc5} = C:\Programmi\AOL\Active Virus Shield\shellex.dll
WinRAR@{B41DB860-8EE4-11D2-9906-E49FADC173CA} = C:\Programmi\WinRAR\rarext.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects >>>
@{528D3486-6700-1244-9C48-859F32EC50D4}C:\WINDOWS\kudgu1.dll /*file not found*/ = C:\WINDOWS\kudgu1.dll /*file not found*/
@{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}C:\Programmi\Java\jre1.5.0_09\bin\ssv.dll = C:\Programmi\Java\jre1.5.0_09\bin\ssv.dll
HKLM\Software\Microsoft\Internet Explorer\Main >>>
@Default_Page_URLhttp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
@Start Pagehttp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
@Local PageC:\WINDOWS\system32\blank.htm = C:\WINDOWS\system32\blank.htm
HKCU\Software\Microsoft\Internet Explorer\Main >>>
@Default_Page_URLhttp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
@Start Pagehttp://www.tgsoft.it/ = http://www.tgsoft.it/
HKLM\Software\Classes\PROTOCOLS\Handler\ >>>
dvd@CLSID = C:\WINDOWS\system32\msvidctl.dll
its@CLSID = C:\WINDOWS\system32\itss.dll
livecall@CLSID = C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
mhtml@CLSID = %SystemRoot%\system32\inetcomm.dll
ms-help@CLSID = C:\Programmi\File comuni\Microsoft Shared\Help\hxds.dll
ms-its@CLSID = C:\WINDOWS\system32\itss.dll
msnim@CLSID = C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
tv@CLSID = C:\WINDOWS\system32\msvidctl.dll
wia@CLSID = C:\WINDOWS\system32\wiascr.dll
widimg@CLSID = C:\WINDOWS\system32\btxppanel.dll
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{7857558E-057F-4EB2-B78B-89FB54214013} /*Connessione alla rete locale (LAN)*/ >>>
@IPAddress192.168.1.2 = 192.168.1.2
@NameServer192.168.1.1 = 192.168.1.1
@DefaultGateway192.168.1.1 = 192.168.1.1
@Domain =
HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{C39E4FCF-DD23-4189-A602-D084483E49D2} /*Bluetooth Network*/ >>>
@IPAddress192.168.10.1 = 192.168.10.1
@NameServer =
@DefaultGateway =
@Domain =
HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000004@LibraryPath = %SystemRoot%\system32\wshbth.dll
---- EOF - GMER 1.0.12 ----
|
|
|
|
|
12-12-2006, 09:53
|
#393 |
|
Senior Member
Iscritto dal: Nov 2005
Messaggi: 358
|
ciao a tutti... sto tentando di rimuovere gromozon da un pc... allora:
. ho usato il tool di eraser e mi dice di averlo rimosso . da services.msc ho controllato i processi sospetti e ne ho terminati 3 con il comando da prompt "sc delete nomeprocesso" . al riavvio 1 processo si è comunque riattivato... . hijackthis non parte e mi sa che sto bastardo è ancora presente... ora sto facendo girare il tool della symantec e vedo se trova qualcosa... il passo successivo sarà gmer... devo fare altro o cmq sbaglio e/o dimentico qualcosa??? il thread è molto interessante anche se non mi è molto chiaro in quanto non c'è una procedura passo passo ben definita!!! |
|
|
|
|
12-12-2006, 10:01
|
#394 | |
|
Member
Iscritto dal: May 2006
Messaggi: 161
|
Quote:
|
|
|
|
|
|
12-12-2006, 10:03
|
#395 |
|
Senior Member
Iscritto dal: Jun 2006
Città: bellissima, mare, ..aria pura, sole a volontà!! Pero' non me li godo...
Messaggi: 657
|
Ciao, hai provato a rinominare l'eseguibile di hijackthis con un nome casuale ?
Il servizio che si riattiva vuoi dire nel senso che lo trovi come AVVIATO nei servizi ? Ciao |
|
|
|
|
12-12-2006, 10:03
|
#396 | |
|
Bannato
Iscritto dal: Mar 2004
Città: Galapagos Attenzione:utente flautolente,tienilo a mente
Messaggi: 28983
|
Quote:
|
|
|
|
|
|
12-12-2006, 10:23
|
#397 | |||
|
Senior Member
Iscritto dal: Nov 2005
Messaggi: 358
|
Quote:
Quote:
la procedura manuale è questa? Quote:
|
|||
|
|
|
|
12-12-2006, 10:27
|
#398 |
|
Bannato
Iscritto dal: Mar 2004
Città: Galapagos Attenzione:utente flautolente,tienilo a mente
Messaggi: 28983
|
si
|
|
|
|
|
12-12-2006, 10:57
|
#399 |
|
Senior Member
Iscritto dal: Nov 2005
Messaggi: 358
|
nuovo aggiornamento: ho provato la procedura manuale cancellando le voci di registro con il nome utente strano... dopodichè ho cancellato anche la cartella del nome utente... eppure il problema con hijackthis si ripresenta... non si riesce ad avviarlo... ed idem per gmer... non riesco manco a decomprimere lo zip... mi si chiude winzip!!!! ora ho installato avg antispyware e quello invece funziona aggiornamento compreso!!! vedremo se rileva qualcosa!!! cmq altri suggerimenti??? sto figlio di xxx è ancora presente secondo voi?
|
|
|
|
|
12-12-2006, 11:03
|
#400 |
|
Bannato
Iscritto dal: Mar 2004
Città: Galapagos Attenzione:utente flautolente,tienilo a mente
Messaggi: 28983
|
c'è ancora...comunque prova a rinominare il file hijackthis.exe.
che antivirus utilizzi?hai provato prevx? |
|
|
|
|
|
| Strumenti | |
|
|
Tutti gli orari sono GMT +1. Ora sono le: 04:20.
